Information Assurance - KVM Switch (Request for Approval ) Documentation is not Available

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-31126	IA-10.03.01	SV-41267r2_rule	DCSP-1	Low

Description
Failure to request approval for connection of new or additional KVM devices (switch boxes) for use in switching betwee SIPRNet devices and unclassified devices (NIPRNet) from the Classified Connection Approval Office (CCAO) could result in unapproved devices being used or approved devices being used or configured in an unapproved manner; therby increasing the risk for the DISN.

STIG	Date
Traditional Security	2013-07-11

Details

Check Text ( C-39812r2_chk )
1. Check to ensure the Enclave/Local DAA submitted initial and updated (as required) Certification and Accreditation (C&A) documentation (IAW the DIACAP) to the CCAO/UCAO reflecting the addition of KVM devices on the user’s enclave. 2. SIPRNet users must also submit an updated SIPRNet Connection Questionnaire (SCQ) to the CCAO reflecting the device on the user’s enclave. TACTICAL ENVIRONMENT: The check is applicable where KVM devices are in use.

Check Text ( C-39812r2_chk )

1. Check to ensure the Enclave/Local DAA submitted initial and updated (as required) Certification and Accreditation (C&A) documentation (IAW the DIACAP) to the CCAO/UCAO reflecting the addition of KVM devices on the user’s enclave.

2. SIPRNet users must also submit an updated SIPRNet Connection Questionnaire (SCQ) to the CCAO reflecting the device on the user’s enclave.

TACTICAL ENVIRONMENT: The check is applicable where KVM devices are in use.

Fix Text (F-35009r3_fix)
1. The Enclave or local DAA must provide initial and updated (as required) Certification and Accreditation (C&A) documentation (IAW the DIACAP) to the CCAO/UCAO reflecting the addition of KVM devices on the user’s enclave. 2. If using KVM on SIPRNet an updated SIPRNet Connection Questionnaire (SCQ) must be submitted to the CCAO reflecting the devices on the user’s enclave.